6 Feb
2009
6 Feb
'09
1:29 a.m.
hyc@symas.com wrote:
There's something more going on here, because the query in question was searching for (&(objectclass=posixgroup)(memberUid=foo)(member=foo-DN)).
I meant (&(objectclass=posixgroup)(|(memberUid=foo)(member=foo-DN)))
There was no memberUid at all in the returned entry, so it must have matched on member, so the member attr should not have been empty.
AD is flaky enough already, but it's possible that back-meta may have dropped the attr values during rewriting, etc.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/